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CLAIMS 



What is claimed is: 

5 LA method of testing a J2EE application, wherein the J2EE application comprises 
modules, the method comprising the steps of: 

identifying (204), from an application deployment descriptor, modules comprised 
within the J2EE application; 

10 

identifying, from an identified module, at least one QOS element; 

identifying, from the identified QOS element, a software resource to be tested; 

1 5 generating Java test code; 

identifying, for the software resource to be tested, a user identification and a user 
password for a user that is a member of a role intended to protect the software 
resource; and 

20 

testing the software resource to be tested by use of the Java test code, including 
passing as parameters to the Java test code at run time the user identification and 
user password. 

25 2. The method of claim 1 wherein: 

at least one of the identified modules comprises a web module having a web 
module deployment descriptor; 
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at least one of the identified QOS elements comprises a security-constraint 
element; 

5 identifying a software resource to be tested further comprises constructing, from a 
<web-uri> element in the application deployment descriptor and from a <url- 
pattern> element in the web module deployment descriptor, a URI that identifies a 
software resource to be tested; 

1 0 testing the software resource by use of the Java test code further comprises 

invoking the URI, wherein the invoking further comprises transmitting an HTTP 
request, wherein the HTTP request includes the URI, the user identification, and 
the user password. 

1 5 receiving an HTTP response; and 

3. The method of claim 3 wherein testing the software resource by use of the Java 
test code further comprises passing as a parameter to the Java test code at run time 
the URI. 

20 

4. The method of claim 3 wherein testing the software resource by use of the Java 
test code further comprises receiving an HTTP response. 

5. The method of claim 3 wherein testing the software resource by use of the Java 
25 test code further comprises determining in dependence upon the HTTP response 

whether the software resource is protected. 
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at least one of the identified modules comprises an Enterprise JavaBean module 
("EJB module") having a deployment descriptor; 

5 

at least one of the identified QOS elements comprises a <method-permission> 
restraint element; 

the <method-permission> restraint element comprises: 
1 0 a first <method-name> sub-element having a first <method-name> 

sub-element value, and 

a first <ejb-name> sub-element having a first <ejb-name> sub-element 
value; 

1 5 the identified software resource to be tested comprises a JavaBean method; 

identifying a software resource to be tested comprises the further steps of: 

finding in a deployment descriptor for the identified EJB module one 
20 or more <enterprise-bean> elements having nested <ejb-name> sub- 

elements having values equal to the first <ejb-name> sub-element 
value, wherein each found <enterprise-bean> element comprises: 

the nested <ejb-name> sub-element, 
25 a <home> nested sub-element, 

a <remote> nested sub-element, and 
an <ejb-class> nested sub-element; and 
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identifying, for each found <enterprise-bean> element, a method 
signature having a method name equal to the first <method-name> 
sub-element value; and 

5 testing the software resource by use of the Java test code comprises the further 

steps of: 

looking up the JavaBean home by use of a JNDI home name for the 
software resource; 

10 

creating, by use of the JavaBean home, an instance of the JavaBean; 
and 

invoking, in the created instance, the protected JavaBean method. 

15 

8. The method of claim 6 wherein testing the software resource by use of the Java 
test code further comprises passing as a parameter to the Java test code at run time 
the JNDI name for the JavaBean method; 

20 9. The method of claim 6 wherein testing the software resource by use of the Java 

test code further comprises logging in to an application environment by use of the 
user identification and the user password. 

10. The method of claim 6 wherein testing the software resource by use of the Java 
25 test code further comprises reporting whether invoking the protected JavaBean 
method succeeded. 
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1 1 . The method of claim 6 wherein identifying, for each found <enterprise-bean> 
element, a method signature having a method name equal to the first <method- 
name> sub-element value further comprises identifying, for each found 
<enterprise-bean> element, by use of Java reflection and the value of the <ejb- 
class> element, a method signature having a method name equal to the first 
<method-name> sub-element value. 
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12. A system of testing a J2EE application, wherein the J2EE application comprises 
modules, the system comprising: 

means for identifying (204), from an application deployment descriptor, modules 
comprised within the J2EE application; 

means for identifying, from an identified module, at least one QOS element; 

means for identifying, from the identified QOS element, a software resource to be 
tested; 

means for generating Java test code; 

means for identifying, for the software resource to be tested, a user identification 
and a user password for a user that is a member of a role intended to protect the 
software resource; and 

means for testing the software resource to be tested by use of the Java test code, 
including means for passing as parameters to the Java test code at run time the 
user identification and user password. 

13. The system of claim 12 wherein: 

at least one of the identified modules comprises a web module having a web 
module deployment descriptor; 
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at least one of the identified QOS elements comprises a security-constraint 
element; 



means for identifying a software resource to be tested further comprises means for 
5 constructing, from a <web-uri> element in the application deployment descriptor 

and from a <url-pattern> element in the web module deployment descriptor, a 
URI that identifies a software resource to be tested; 

means for testing the software resource by use of the Java test code comprises: 

10 

means for invoking the URI wherein the means for invoking further comprises 
means for transmitting an HTTP request, wherein the HTTP request includes the 
URI, the user identification, and the user password. 

15 14. The system of claim 13 wherein means for testing the software resource by use of 
the Java test code further comprises means for passing as a parameter to the Java 
test code at run time the URI. 

15. The system of claim 13 wherein means for testing the software resource by use of 
20 the Java test code further comprises means for receiving an HTTP response. 

16. The system of claim 13 wherein means for testing the software resource by use of 
the Java test code further comprises means foi determining in dependence upon 
the HTTP response whether the software resource is protected. 

25 
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at least one of the identified modules comprises an Enterprise JavaBean module 
("EJB module") having a deployment descriptor; 

5 

at least one of the identified QOS elements comprises a <method-permission> 
restraint element; 

the <method-permission> restraint element comprises: 

10 

a first <method-name> sub-element having a first <method-name> 
sub-element value, and 

a first <ejb-name> sub-element having a first <ejb-name> sub-element 
value; 

15 

the identified software resource to be tested comprises a JavaBean method; 

means for identifying a software resource to be tested comprises: 

20 means for finding in a deployment descriptor for the identified EJB 

module one or more <enterprise-bean> elements having nested <ejb- 
name> sub-elements having values equal to the first <ejb-name> sub- 
element value, wherein each found <enterprise-bean> element 
comprises: 

25 

the nested <ejb-name> sub-element, 

a <home> nested sub-element, 

a <remote> nested sub-element, and 
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an <ejb-class> nested sub-element; and 



means for identifying, for each found <enterprise-bean> element, a 
method signature having a method name equal to the first <method- 
name> sub-element value; and 

means for testing the software resource by use of the Java test code comprises: 

means for looking up the JavaBean home by use of a JNDI home name 
for the software resource; 

means for creating, by use of the JavaBean home, an instance of the 
JavaBean; 

means for nvoking, in the created instance, the protected JavaBean 
method. 

19. The system of claim 17 wherein means for testing the software resource by use of 
the Java test code further comprises means for passing as a parameter to the Java 
test code at run time the JNDI name for the JavaBean method; 

20. The system of claim 17 wherein means for testing the software resource by use of 
the Java test code further comprises means for logging in to an application 

^ environment by use of the user identification and the user password. 

21. The system of claim 17 wherein means for testing the software resource by use of 
the Java test code further comprises means for reporting whether invoking the 
protected JavaBean method succeeded. 
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22. The system of claim 17 wherein means for identifying, for each found <enterprise- 
bean> element, a method signature having a method name equal to the first 
<method-name> sub-element value further comprises means for identifying, for 
each found <enterprise-bean> element, by use of Java reflection and the value of 
the <ejb-class> element, a method signature having a method name equal to the 
first <method-name> sub-element value. 
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23. A computer program product of testing a J2EE application, wherein the J2EE 
application comprises modules, the computer program product comprising: 

5 a recording medium; 

means, recorded on the recording medium, for identifying (204), from an 
application deployment descriptor, modules comprised within the J2EE 
application; 

10 

means, recorded on the recording medium, for identifying, from an identified 
module, at least one QOS element; 

means, recorded on the recording medium, for identifying, from the identified 
1 5 QOS element, a software resource to be tested; 

means, recorded on the recording medium, for generating Java test code; 

means, recorded on the recording medium, for identifying, for the software 
20 resource to be tested, a user identification and a user password for a user that is a 
member of a role intended to protect the software resource; and 

mean % recorded on the recording medium, for testing the software resource to be 
tested by use of the Java test code, including means for passing as parameters to 
25 the Java test code at run time the user identification and user password. 
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24. The computer program product of claim 23 wherein: 



at least one of the identified modules comprises a web module having a web 
module deployment descriptor; 

5 

at least one of the identified QOS elements comprises a security-constraint 
element; 

means, recorded on the recording medium, for identifying a software resource to 
10 be tested further comprises means for constructing, from a <web-uri> element in 

the application deployment descriptor and from a <url-pattern> element in the 
web module deployment descriptor, a URI that identifies a software resource to be 
tested; 

1 5 means, recorded on the recording medium, for testing the software resource by use 

of the Java test code comprises: 

means, recorded on the recording medium, for invoking the URI wherein the 
means for invoking further comprises means for transmitting an HTTP request, 
20 wherein the HTTP request includes the URI, the user identification, and the user 

password. 

25. The computer program product of claim 24 wherein means for testing the 

software resource by use of the Java test code further comprises means for passing 
25 the URI as a parameter to the Java test code at run time. 
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26. The computer program product of claim 24 wherein means for testing the 
software resource by use of the Java test code further comprises means for 
receiving an HTTP response. 

5 27. The computer program product of claim 24 wherein means for testing the 
software resource by use of the Java test code further comprises means for 
determining in dependence upon the HTTP response whether the software 
resource is protected. 

10 28. The computer program product of claim 23 wherein: 

at least one of the identified modules comprises an Enterprise JavaBean module 
("EJB module") having a deployment descriptor; 

15 at least one of the identified QOS elements comprises a <method-permission> 

restraint element; 

the <method-permission> restraint element comprises: 

20 a first <method-name> sub-element having a first <method-name> 

sub-element value, and 

a first <ejb-name> sub-element having a first <ejb-name> sub-element 
value; 

25 the identified software resource to be tested comprises a JavaBean method; 

means, recorded on the recording medium, for identifying a software resource to 
be tested comprises: 
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means, recorded on the recording medium, for finding in a deployment 
descriptor for the identified EJB module one or more <enterprise- 
bean> elements having nested <ejb-name> sub-elements having values 
equal to the first <ejb-name> sub-element value, wherein each found 
<enterprise-bean> element comprises: 

the nested <ejb-name> sub-element, 
a <home> nested sub-element, 
a <remote> nested sub-element, and 
an <ejb-class> nested sub-element; and 

means, recorded on the recording medium, for identifying, for each 
found <enterprise-bean> element, a method signature having a method 
name equal to the first <method-name> sub-element value; and 

means, recorded on the recording medium, for testing the software resource by use 
of the Java test code comprises: 

means, recorded on the recording medium, for looking up the 
JavaBean home by use of a JNDI home name for the software 
resource; 

means, recorded on the recording medium, for creating, by use of the 
JavaBean home, an instance of the JavaBean; 

means, recorded on the recording medium, for invoking, in the created 
instance, the protected JavaBean method. 
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29. The computer program product of claim 28 wherein means for testing the 
software resource by use of the Java test code further comprises means, recorded 
on the recording medium, for passing as a parameter to the Java test code at run 

5 time the JNDI name for the JavaBean method; 

30. The computer program product of claim 28 wherein means for testing the 
software resource by use of the Java test code further comprises means, recorded 
on the recording medium, for logging in to an application environment by use of 

10 the user identification and the user password. 

3 1 . The computer program product of claim 28 wherein means for testing the 
software resource by use of the Java test code further comprises means, recorded 
on the recording medium, for reporting whether invoking the protected JavaBean 

1 5 method succeeded. 

32. The computer program product of claim 28 wherein means for identifying, for 
each found <enterprise-bean> element, a method signature having a method name 
equal to the first <method-name> sub-element value further comprises means for 

20 identifying, recorded on the recording medium, for each found <enterprise-bean> 
element, by use of Java reflection and the value of the <ejb-class> element, a 
method signature having a method name equal to the first <method-name> sub- 
element value. 

25 
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